composer/composer — pull request #2569 by gimler (2014-01-09 12:13:25+00:00)
Title: Escape env value before passing it to system call

You can possible inject shell commands into composer config command.

```
EDITOR="ls;gedit" composer config -e
```